The limitations of AI safety tools